cgsecurity.org

Thank you for your replies. Although I still don't understand why offsets do work sometimes and sometimes not, I was able to recover the files by specifying signatures without offsets. It didn't work for all the files types and I'll try to refine the signatures and give it another go.

What sets ...

Hello @recuperation and thank you for your quick reply.

Yes, I accidentally forgot the " at the end of the second line, since I re-typed the code which is on another machine. My apologies.
Yes, I did read the relevant section of the testdisk manual, several times actually. I didn't mention it ...

Hello all,

I'm trying to define custom signatures for Photorec and they work fine as long as the offset is set to 0. However to make the signatures more specific, for one of the file types I need to look for strings that appear further down in the file. When I specify an offset other than zero ...